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UNITED STATES DISTRICT COURT 
NORTHERN DISTRICT OF CALIFORNIA 


TASH HEPTING, GREGORY HICKS, 
CAROLYN JEWEL, and ERIK KNUTZEN 
On Behalf of Themselves and All Others 
Similarly Situated, 

. Plaintiffs, 


v. 


AT&T CORP., AT&T INC., and 
DOES 1-20, inclusive, 

Defendants. 


Case No. C-06-0672-VRW 

CLASSIFIED DECLARATION 
OF JOHN D. NEGROPONTE, 
DIRECTOR OF NATIONAL 
INTELLIGENCE 

SUBMITTED IN CAMERA, 
EX PARTE 

Hon. Vaughn R. Walker 


IN CAMERA, EX PARTE DECLARATION OF JOHN D. NEGROPONTE, 

DIRECTOR OF NATIONAL INTELLIGENCE 

I, John D. Negroponte, do hereby state and declare as follows: 

(TJ) INTRODUCTION 

1 . (U) I am the Director of National Intelligence (DNI) of the United States. I have 
held this position since April 21, 2005. From June 28, 2004, until appointed to be DNI, I served 
as United States Ambassador to Iraq, From September 18, 2001, until my appointment in Iraq, I 
served as the United States Permanent Representative to the United Nations. 1 have also served 
as Ambassador to Honduras (1981-1985), Mexico (1989-1993), the Philippines (1993- 1996), and 
as Deputy Assistant to the President for National Security Affairs (1987-1989). 

2. (U) In the course of my official duties, I have been advised of this lawsuit and the 
allegations at issue in this case. The statements made herein are based on my personal 
knowledge as well as on information provided to me in my official capacity as Director of 
National Intelligence. In particular, as set forth below, I have read and personally considered the 
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information contained in the In Camera, Ex Parte Declaration of LU Gen. Keith B. Alexander, 
Director of the National Security Agency t filed in this case* 
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3. (TS//SI 



P//OC/NF) A s Gen. Alexander states, see In Camera 


Alexander Dec!. 1 3, this lawsuit implicates several highly classified and critically important 


intelligence activities of the National Security Agency and, in particular 


that cannot be disclosed without causing exceptionally grave harm to U.S, 





including certain activities that have been specifically authorized by the Foreign Intelligence 

* 

Surveillance Court ("FISC"). Each of these activities is utilized to meet the extremely serious 



threat of another terrorist attack on the U.S. Homeland 


a threat which I describe further below based on a recent assessment of the National Counter 
Terrorism Center (NCTC) prepared in April 2006, 

4. (U) The purpose of this declaration is to formally assert, in my capacity as the 
Director of National Intelligence and head of the United States Intelligence Community, the 
military and state secrets privilege (hereafter "state secrets privilege") and a statutory privilege 
under the National Security Act, see 50 U.S.C. § 403-l(i)(l), in order to protect intelligence 
information, sources, and methods that are at risk of disclosure in this case. Disclosure of the 


information covered by this privilege assertion reasonably could be expected to cause 
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exceptionally grave damage to the national security of the United States and, therefore, the 
information should be excluded from any use in this case. In addition, I concur with Gen. 
Alexander's conclusion that, because the very subject matter of this lawsuit concerns highly 
classified and critically important foreign intelligence activities, the risk is great that further 
litigation will lead to the disclosure of information harmful to U.S. national security and, 
accordingly, that this case should be dismissed. See In Camera Alexander Decl. H 76. 

(TJ1 CLASSIFICATION OF DECLARATION 

5. ^XS^Pursuant to the standards in Executive Order No. 12958, as amended by 
Executive Order No. 13292, this declaration is classified as: TOP SECRET//COM 

III HI i n II II I HI Ml II Hi details concerning these classification 

markings are set forth in the Alexander Declaration at ft 5-8 and are briefly summarized here. 
Under Executive Order No. 12958, information is classified 'TOP SECRET* if unauthorized 
disclosure of the inf brmation reasonably could be expected to cause exceptionally grave damage 
to the national security of the United States; "SECRET* if unauthorized disclosure of the 

information reasonably could be expected to cause serious damage to national security; and 

- 

/'CONFIDENTIAL" if unauthorized disclosure of the information reasonably could be expected 
to cause identifiable damage to national security. At the beginning of each paragraph of this 
declaration, the letters M U/' "C t " "S," and *TS" indicate respectively that the information is 
either UNCLASSIFIED, or is classified CONFIDENTIAL, SECRET, or TOP SECRET. 

6, ^^Additionally, this declaration also contains Sensitive Compartmented 
Information (SCI), which is "subject to special access and handling requirements because it 
involves or derives from particularly sensitive intelligence sources and methods." 28 C.RR, 
§ 17.18(a). This declaration references communications intelligence (COMINT) T also refened to 
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as special intelligence (SI), which is a subcategory of SCI that identifies information that was 

derived from exploiting cryptographic systems or other protected sources by applying methods 
or techniques, or from intercepted foreign communications. This declaration also references 
human intelligence (HCS), another subcategory of SCI that identifies information derived from 
individuals who provide intelligence information* 


7, (TS//SI 



SP//OC/NF) T his declaration also contains information 


about the Terrorist Surveillance Program (TSP), a controlled access signals intelligence program 
authorized by the President in response to the attacks of September 1 1 1 2001. Information 


pertaining to this program is denoted with the special marking *TSP. 



^JBinally, information labeled "NOFORN" may not be released to foreign 
governments, foreign nationals, or non-U,S, citizens without permission of the originator and in 
accordance with DNI policy. The M ORCON M designator means that the originator of the 
information controls to whom it is released. Finally, this document is marked Manual Review 
("MR") indicating that it is not subject to automatic declassification at any specific date. 

fU) BACKGROUND ON DIRECTOR QF NATIONAL INTELLIGENCE 
9. (U) The position of Director of National Intelligence was created by Congress in 
the Intelligence Reform and Terrorism Prevention Act of 2004, Pub. L. 108-458, §§ 101 1(a) and 
1097, 1 18 Stat. 3638, 3643-63, 3698-99 (2004) (amending sections 102 through 104 of Title I of 


the National Security Act of 1947). Subject to the authority, direction, and control of the 


President, the Director of National Intelligence serves as the head of the U.S. Intelligence 
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Community and as the principal adviser to the President, the National Security Council, and the 
Homeland Security Council for intelligence matters related to the national security. See 50 
U.S.C. § 403(b)(1), (2). 

10. (U) The United States "Intelligence Community" includes the Office of the 
Director of National Intelligence; the Central Intelligence Agency; the National Security 
Agency; the Defense Intelligence Agency; the National Geospatial-Intelligence Agency; the 
National Reconnaissance Office; other offices within the Department of Defense for the 
collection of specialized national intelligence through reconnaissance programs; the intelligence 
dements of the military services, the Federal Bureau of Investigation, the Department of the 
Treasury, the Department of Energy, the Drug Enforcement Administration, and the Coast 
Guard; the Bureau of Intelligence and Research of the Department of State; the elements of the 
Department of Homeland Security concerned with the analysis of intelligence information; and 
such other elements of any other department or agency as may be designated by the President, or 
jointly designated by the DNI and heads of the department or agency concerned, as an element of 
the Intelligence Community. See 50 U.S.C § 401a(4). 

11. (U) The responsibilities and authorities of the Director of National Intelligence 
are set forth in the National Security Act. See 50 U.S.C. § 403-1. These responsibilities include 
ensuring that national intelligence is provided to the President, the heads of the departments and 
agencies of the Executive Branch, the Chairman of the Joint Chiefs of Staff and senior military 
commanders, and the Senate and House of Representatives and committees thereof. 50 U,S.C 
§ 403-1 (a)(1). The DNI is also charged with establishing the objectives of, determining the 
requirements and priorities for, and managing and directing the tasking, collection, analysis, 
production, and dissemination of national intelligence by elements of the Intelligence 
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Community, Id § 403- 1 (f)( 1 )( A)(i ) and (ii). The DNI is also responsible for developing and 

■ 

determining, based on proposals submitted by the heads of agencies and departments within the 
Intelligence Community, an annual consolidated budget for the National Intelligence Program 
for presentation to the President, and for ensuring the effective execution of the annual budget 
for intelligence and intelligence-related activities, and for managing and allotting appropriations 
for the National Intelligence Program, Id. § 403-l(c)(l)-(5). 

12. (U) In addition, the National Security Act of 1947, as amended, provides that 
"[t]he Director of National Intelligence shall protect intelligence sources and methods from 
unauthorized disclosure." 50U.S.C. § 403-l(i)(l). Consistent with this responsibility, the DNI 
establishes and implements guidelines for the Intelligence Community for the classification of 
information under applicable law, Executive orders, or other Presidential directives and access to 
and dissemination of intelligence. Id § 403-l(i)(2)(A), (B). In particular, the DNI is responsible 
for the establishment of uniform standards and procedures for the grant of access to Sensitive 
Compaxtmented Information ("SCI") to any officer or employee of any agency or department of 
the United States, and for ensuring the consistent implementation of those standards throughout 
such departments and agencies, Id § 403-l(j)(l), (2), 

13. (U) By virtue of my position as the Director of National Intelligence, and unless 
otherwise directed by the President, I have access to all intelligence related to the national 
security that is collected by any department, agency, or other entity of the United States. 
Pursuant to Executive Order No. 12958, 3 C.RR, § 333 (1995), as amended by Executive Order 
13292 (March 25, 2003), reprinted as amended in 50 U.S,C.A, § 435 at 93 (Supp. 2004), the 
President has authorized me to exercise original TOP SECRET classification authority. 
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(Ui ASSERTION OF STATE SECRETS PRIVILEGE 


14, -fFS/ZSi^^^^p^-As sat forth herein, and as described in the Declaration of 
Gen. Alexander* see Alexander Decl 1 3, various classified facts and categories of classified 
information related to national intelligence activities are implicated by the Plaintiffs* claims in 
this case. After careful and actual personal consideration of the matter, based upon my own 
knowledge and information obtained in the course of my official duties, including the 
Declaration of Gen. Alexander, I have determined that the disclosure of the information 
described herein concerning intelligence information, sources, and methods reasonably could be 
expected to cause exceptionally grave damage to the national security of the United States and 
must be excluded from disclosure and use in this case. In addition* it is my judgment that 
sensitive state secrets are so central to the subject matter of the litigation that any attempt to 
proceed in the case will substantially risk the disclosure of the secrets described herein and will 
cause exceptionally grave damage to the national security of the United States. 
(P) ASSERTION OF STATUTORY PRIVILEGE UNDER NATIONAL SECURITY ACT 


15. (TS//BI//NF) T hrough this declaration, I also hereby invoke and assert a statutory 
privilege held by the Director of National Intelligence under the National Security Act to protect 
intelligence sources and methods at issue in this case, see 50 U.S.C. § 403-l(i)(l). My assertion 

of this statutory privilege for intelligence sources and methods is coextensive with my state 

■ 

secrets privilege assertion as to intelligence sources and methods. 

OJ) INFORMATION SUBJECT TO CLAIM OF PRIVILEGE 



16. - (TS//S1 frSPtfOC/NF) T he information related to the Plaintiffs 


claims that is subject to the state secrets and statutory privileges I am asserting includes the 
following; 
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A. Information ConceraingtheContinuing al Qaeda Terrorist Threat 

B. Intelligence Sources and Methods 



(3) Meta Data Collection and Analysis 

(4) The Terrorist Surveillance Program 

(a) Focus of the TSP on a! Qaeda Terrorist Targets 

(b) Importance of the TSP 
C* Information that Would Confirm or Deny Intelligence Targets 

I first describe the al Qaeda terrorist threat, which forms the foundation of my assertion of 
privilege, because it is the threat at which the challenged intelligence activities are directed. I 
then summarize the intelligence sources and methods at issue in this case described by Gen, 
Alexander* I also discuss the harm that would result to U.S. national security if the privileged 
information at issue were disclosed. 

OJ) DESCRIPTION OF INFORMATION AND HARM OF DISCLOSURE 
A. (V) Information Concerning the Continuing al Qaeda Terrorist Threat 
17. (S//OC/NF) Based on all of the intelligence information presently available to us, 


it is the judgment of the U.S. Intelligence Community that the al Qaeda terrorist network has the 
intention and the potential capability to cany out catastrophic terrorist acts on the U.S. 
Homeland. Indeed, intelligence indicates that al Qaeda* s central leadership is pursuing multiple* 
possibly related, paths to an attack against the Homeland. This is so notwithstanding a series of 
setbacks to the al Qaeda terrorist network. Preventing such attacks is the U.S. Intelligence 


Community's highest priority. The intelligence activities that are implicated by and put at risk of 
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disclosure in this lawsuit must be understood in the context of the extremely serious threat faced 
by the United States, 

1 8. (U) With the attacks of September 1 1 , al Qaeda demonstrated its ability to 
introduce agents into the United States undetected and to perpetrate devastating attacks, As the 
President has recently made clear, "[t]he terrorists want to strike America again, and they hope to 
inflict even more damage than they did on September the 1 1th/* Press Conference of President 
Bush (Dec, 19, 2005). 1 For this reason, as the President explained, finding al Qaeda sleeper 
agents in the United States remains one of the paramount concerns in the War on Terror to this 
day. Id 

19. (U) Since September 1 1, al Qaeda leaders have repeatedly promised to deliver 
another, even more devastating attack on America. For example, in October 2002, al Qaeda 
leader Ayman al-Zawahiri stated in a video addressing the "citizens of the United States": "I 
promise you that the Islamic youth are preparing for you what will fill your hearts with horror." 
In October 2003, Osama bin Laden stated in a released videotape that "We, God willing, will 
continue to fight you and will continue martyrdom operations inside and outside the United 

States " And again in a videotape released on October 24, 2004, bin Laden warned United 

States citizens of further attacks and asserted that "your security is in your own hands " 

20. (U) In recent months, al Qaeda has reiterated its intent to inflict a catastrophic 
terrorist attack on the United States. On December 7, 2005, al-Zawahiri professed that al Qaeda 
"is spreading, growing, and becoming stronger " and that al Qaeda is "waging a great historic 
battle in Iraq, Afghanistan, Palestine, and even in the Crusaders' own homes/ 1 


Available at http://www. whi tehouse. pov//news/rele ases/20O5/l 2/200.5 1 2 1 9-2.html 
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21 . (U) Since the September 1 1 attacks, al Qaeda has staged several large-scale 

attacks around the world* including in Indonesia, Madrid, and London, killing hundreds of 
innocent people. 

-fHfmemSXAl Oaeda's Likely Presence in the United States 

22. T^^S/ZOGflN^uCIassified intelligence information provides a more specific 
and alarming picture of the continuing terrorist threat to the Homeland posed by al Qaeda. In 
sum, the U.S. Intelligence Community believes that the al Qaeda terrorist network intends to 
execute a catastrophic terrorist attack on the U.S. Homeland. That threat is the reason that the 
President authorized the Terrorist Surveillance Program and related activities described herein. 
The intelligence activities at issue in this case are thus being utilized to meet a known, real, and 
perhaps imminent threat to the lives of thousands of Americans and, indeed, to the continuity of 
the United States Government, The threat that we face cannot be understated and may be of the 
most extreme nature. 

23. iSZ^raeStfeONEpn particular, based on the most recent assessment issued 
on April 20, 2006, by the National Counterterrorism Center (NCTC), an entity that I oversee as 
DNI, the U.S. Intelligence Community continues to receive reliable intelligenc 

intelligence sources that al Qaeda remains intent on conducting a grand-scale 
attack on the Homeland with a likely focus on U,S. symbols of power or economic might. Al 
Qaeda continues to have these intentions despite the degradation of its leadership, resources, and 
operational capability in the wake of a steady stream of deaths, captures, and disruptions. 





As a result of our 


disruptions of the group's planning and increased security measures, however, "softer" targets 
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have become increasingly attractive. Specific softer targets include tourist sites, shopping 


centers, and passenger trains. 


24. 7S77H€8AISE)JWe have numerous reasons to believe al Qaeda is still plotting 
another attack on U.S. soil, The Al-Jazirah television network aired an audiotape in January 
2006 in which Osama bin Laden said that preparations were under way for attacks inside the 
United States and that al Qaeda* s failure to strike the United States since September 1 1 , 2001 
was not due to improved U.S. security measures. Bin Laden* s deputy, Ayman al-Zawahiri, also 
issued threats against the United States in statements in January and March of this year. In 
addition, an al Qaeda media facilitator released a statement on September 11, 2005, threatening 
new attacks on the United States, specifically naming Los Angeles as a target. 

25. 
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Our intelligence also indicates that al Qaeda is continually looking for operatives 


capable of entering the United States without undue scrutiny, 



Possible al Qaeda Targets and Attacks 

any attack on the Homeland would be viewed by al 



28. "ISflHCSflee^-AUiaeda's signature attack is one that would be impressive in 
its scope or audacity and that hits either multiple targets simultaneously or a single high-profile 
place or person, According to the April 2006 NCTC assessment, reporting 

has identified a variety of potential targets that would be attractive to group 

operatives: 
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yiICS//OC/NF) A lthough intelligence regarding specific targets or 


locations is often incomplete, known target locations include large cities 



30. " (S//IICS/yOC/NFHn addition, constraints on al Qaeda's capabilities and 
increased security measures at airports, government buildings, and other high-profile targets in 
the United States could be making lower profile, less-protected targets increasingly attractive. 
An attack in the United States, like those against the Madrid commuter train and London 
transport system, would probably meet al Qaeda's objectives without requiring the planning, 
resources, and expertise that would be necessary for a complex September 1 1 -style attack. 
According to our present intelligence, this shift in al Qaeda's planning has become apparent in 
recent months 
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33. - (S//IICS//OC/NT) The U.S. Intelligence Community remains concerned that the 

multiple terrorist attacks carried out in London in July 2005 and Madrid in March 2004 may be a 

harbinger of similar attacks to come in the United States in which Islamic extremists in Western 

countries — whether homegrown or sent from abroad— will mimic and refine the small bomb 

tactics used in these attacks? Of specific concern to the Intelligence Community in the wake of 

the London bombings is the continuing interest that al Qaeda and its affiliates have expressed in 


attackin 



Our intelligence suggests that any attack against 




most likely would occur in major cities or against 



erving major 


cities, which would be consistent with al Qaeda 1 s expressed intent to inflict a high number of 
casualties in key centers of the economy. 



" (S//IICS//OC/NF)-With respect to al Qaeda-inspired groups, the U.S. Intelligence 
Communi ty remains cnn ci 
extremii 
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While U.S. authorities have identified instances of possible surveillance and pre-operational 
activities aimed at gathering intelligence on rail transit systems, as yet there is no corroborating 
intelligence to link them to operational planning against U.S. mass transit systems. 

35. (S//HCS//OG/NF) T he Intelligence Community also believes that al Qaeda and 
its affiliates continue to target the civil aviation sector, including U.S. passengers and Western 
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Homeland, some of which could be in the advanced stages of preparation. 



Unconventional Weapons 
37. ^t S//HCS//OONir)-T he threat posed by al Qaeda extends beyond the realm of 
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40. " (T3/SI//OC/NF) These various examples of some of our intelligence information 
demonstrate that the al Qaeda network continues to plan ways to inflict a catastrophic attack. In 
sum, based on all of the intelligence presently available to us, it is the U.S. Intelligence 
Community's judgment that al Qaeda poses a grave danger to the U.S. Homeland. The severity 
of that threat, and the difficulty of tracking al Qaeda members, is precisely the reason the 
government is utilizing all lawful intelligence-gathering capabilities. I set forth this threat 
information not only to provide the court with crucial background as to why the intelligence 
activities at issue in this case are being undertaken, but also to assert a claim of privilege over 
this threat information. Although the foregoing threat assessment demonstrates precisely why 


we undertake these activities, the government cannot disclose this information in defending the 
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legality of the intelligence activities being challenged, since to do so obviously would disclose to 
our adversaries what we know of their plans and how we may be obtaining information about 
them. Such disclosure would lead our adversaries to not only alter their plans, but to implement 
greater security for their communications! thereby increasing the risk of non-detection, In 
addition, disclosure of threat information might reveal human sources for the United States and, 
thus, compromise those sources and put lives at danger. Accordingly, while I believe that such 
threat information is crucial to understanding the context in which NSA conducts the intelligence 
activities put at issue by Plaintiffs' lawsuit, I must assert the state secrets privilege and DN1 
statutory privilege over the information because of the grave damage to national security that 
could reasonably be expected to result from its disclosure. 
B. Intelligence Sources and Methods 


4i. -crswsi 




/OC/NF) A s set forth in Gen. Alexander's Declaration, 


the United States faced urgent and immediate intelligence challenges after the September 11 
attacks, and the President authorized signals intelligence activities designed to meet those 
challenges and to detect and prevent future terrorist attacks by al Qaeda and its affiliates. See In 
Camera Alexander Decl. M 17-20; 21-24. In carrying out these intelligence activities and 


others, the NSA utilizes various sources and methods, including 



Id In addition, pursuant to 
authorizations of the President and Foreign Intelligence Surveillance Court ("FISC"), NSA is 
collecting non-content "meta data" related to Internet communications for the purpose of 
conducting targeted analysis to uncover the contacts 
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Id. 1 23. For the same purpose, NSA similarly collects in bulk non- 


;ontent meta data for telephone calls. Id. I 24. NSA is also collecting the content of certain 
elephone and Internet communications involving al Qaeda members or affiliates, as authorized 
yy the President under the TSP. Id, 1 22, 


42. " (TS//S 



/TSPZ/Or/lSF) T concur with Gen. Alexander's assessment 



e directly 

it issue in this case and that further litigation thus poses a grave risk: to national security. For this 
reason, along with the al Qaeda threat information as to which I have asserted privilege above, I 
am also formally asserting the state secrets privilege and the DNFs statutory privilege to protect 
the intelligence information, sources and methods further described in Gen. Alexander's 
declaration, I have personally considered this information, assert a claim of privilege as to each 
category, and explain the harm to national security that would result from its disclosure. 
43. (TS/fl 



In sum, upon personal consideration of the 
matter, it is my judgment that disclosure of the information described below, and as further 
detailed in the Declaration of Gen, Alexander would cause exceptionally grave damage to the 
national security of the United States by: 


( I ) Revealing the sources and methods concerning NSA intelligence-gathering 
activities, including by: 



well as activities design 


purpose of detecting and 
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preventin£^H^|P^^Bltacl^ f such as the TSP and meta data collection and 
analysis. t h&rebvcnaCTin^nv foreign advcrsi 

| to compromise, detect, and evade NSA surveillance. 

• Revealing information regarding the success of NSA activities implicated by this 
case* which would disclose the substantive knowledge of the United States 
Government as to terrorist plans and activities, and also could tend to reveal the 
sources and methods by which the United States obtained such information, 

(2) Revealing information regarding who is or is not targeted for surveillance by the 
NSA, or th^jasisoinghi^ thereby allowing any foreign 

adversarjnj^^mHH^^^^^^^^^^o compromise, detect, or evade 
U.S. survefllanceopei^ 

In Camera Alexander Decl. i 62. I describe the harm that would be caused by the disclosure of 

the information in each category at issue further below. In addition, I concur with Gen- 

Alexander's assessment that even bits of information or seemingly innocuous facts can, in the 

context of this case or in conjunction with unclassified information* reveal a fuller picture of 

■ 

highly classified government activities and cause severe harm to national security interests. Id. 


(1) (TS//S 
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(3) '' ITStfSK^Meta Data Collection and Analysis 

49. (T§?7Si#NEiI further assert the state secrets privilege and the DNI statutory 
privilege to protect from disclosure in this case information that would reveal or tend to reveal 
NS A actions to collect and conduct targeted analysis of non-content information known as "meta 
data" related to Internet and telephone communications. See In Camera Alexander Decl. <H 37- 
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44. 



SP//HCS//ORCOWNOFORN//MR 


50. lTSfl5ltfNF)^Gen. Alexander explains, meta data is non-content 


header/router/addressing information, such as the "to" ''from," "cc," and "bcc" lines (as opposed 
to the body or "re 1 * lines) of a standard email, for certain communications. See In Camera 


Alexander Decl. % 39, The NSA collects, in bulk, meta data associated with electronic 


communication 




Id The NSA also collects, in bulk, telephony meta data 


Id ff 24, 44. The collection of Internet and telephony meta data was authorized 
by the President after the September 1 1 attacks. Id 1 23 n.7. In July 2004, the Foreign 
Intelligence Surveillance Court also authorized the bulk collection of Internet meta data and has 
reauthorized that collection approximately every 90 days since. Id 

5 i . ~lTS#S*fft^^ collection of meta data allows NSA to use critical and 

unique analytical capabilities to track, historically, the contac 

known terrorists, a tool that has been highly useful in detecting previously unknown terrorists 

■ 

and unknown terrorist accounts. In Camera Alexander Decl. H 40-42; 44. Although the NSA is 
collecting meta data in bulk, it is only authorized to query the archived meta data using email 
addresses or telephone numbers for which there are facts giving rise to a reasonable, articulable 
suspicion that the email address is associated with 
M If 23, 24, 39. 
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plans as possible. Id 143, 

52, (TS//SI//NF) A s Gen. Alexander explains, with meta data analysis* NSA can 



analyze critical I Icoramunications that identify those communicating and collaborating 



with! loperatives. See In Camera Alexander Decl. % 43. Without this method of 


analysis, NSA would be left with individual communications conducted, for example, with email 
addresses that may quickly vanish. Id In order to ascertain as rapidly as possible the potential 
errorist threats facing the United States, NSA must know not only what a foreign terrorist 
target says in a particular telephone or Internet intercept, but with whom that person has been 



communicating. Id, 

S3. (T S //SI//TSP//OCyNF) D isclosure of NSA activities to collect and analyze meta 
data, including the Foreign Intelligence Surveillance Court's authorization of bulk Internet meta 
data collection, would cause exceptionally grave harm to the national security of the United 
States, As Gen. Alexander explains, NSA's collection and analysis of meta data is a unique and 
highly valuable tool for quickly assessing the identities, whereabouts, and relationships of 
individuals involved in terrorist activities. See In Camera Alexander Decl. 1 70, The loss of this 
technique would cause exceptionally grave harm, and indeed, grave danger, because 

eek already to utilize significant measures to hide their communications. The loss of 
any tool to help track this severe terrorist threat to the US, Homeland, but particularly one so 
sophisticated, could have devastating results— in loss of life, or the economic, social, and 
governmental stability of the United States. 
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(4) (V) The Terrorist Surveillance Program 

54. (TS//SI//TSP//OC/NF) I hereby also assert the state secrets privilege and the DNI 
statutory privilege to protect from disclosure in this case information that would reveal or tend to 
reveal classified information concerning the operation of the Terrorist Surveillance Program 


acknowledged by the President in December 2005. See In Camera Alexander Decl. H 45-58. 
While public speculation about the TSP tends to assume that the program collects a wide range 
of domestic communications, that is not the case. The program is narrowly focused on collecting 
the communications of an agent, member, of associate of al Qaeda. Under the TSP, 
communications are intercepted only if they either originated or terminated outside the United 
States and only if a party to the communication is a member or affiliate of al Qaeda. As Gen. 
Alexander explains, NSA's decision to collect the content of phone calls or emails turns on 
factors that are all linked to whether an al Qaeda connection is at issue. See In Camera 


Alexander Decl 1 46-60 



pecifically 

intercepts telephone and email address that, through analysis, are reasonably believed to be that 
of an agent, member, of associate of ai Qaeda, Id Jf 49, 52. Among the highly classified 
aspects of the TSP is its relationship to meta data collection and analysis. NS A SIGINT 
activities typically interrelate, and in this instance the importance and effectiveness of the TSP is 
that, in conjunction with meta data analysis, it provides an unmatched operational swiftness for 
targeting not just one suspected terrorist, but for ascertaining those who are collaborating with 
that terrorist Id fl 56-57. 
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55. " (TS//SI//TSP//OQNF) Information about how the TSP is operated could not be 
evealed without causing exceptionally grave damage to the national security. The factors on 
which NS A relies to target someone under the TSP but would tip-off adversaries as to how they 
night get caught in this surveillance, The interaction between the TSP and meta data analysis, 
while important to understanding the speed and flexibility of the program, would also reveal to 
adversaries that 




As Gen. Alexander explains, armed with this knowledge, an adversary could take 


steps to avoid detection, 




See In Camera Alexander Decl. fll 70, In short, anything that compromises 
Now NSA collects vital intelligence on the terrorist threat within the United States will make it 
harder to detect that threat, and more likely that a terrorist attack will be successful. 

56. -ffS# Sl//TS P / /OC/NEXFinatly, disclosure of information that would reveal or tend 
to reveal the success of the NSA activities at issue would cause exceptionally grave harm to the 
national security. As Gen, Alexander explains* these activities constitute highly important 
intelligence tools available to the United States for protecting the Homeland from another 
terrorist attack. See In Camera Alexander Dech ffl 58(a)-(e), The interception of 
communications under the TSP, in conjunction with meta data analysis, has been successful in 
helping to find terrorists in our midst. Id. But, as again should be clear, the government cannot 
disclose how the challenged activities have worked to protect the national security of the United 
States without compromising those very activities and revealing the substantive knowledge of the 
United States Government as to terrorist plans and activities. Nor can the government use the 
examples of successes to demonstrate that the central focus of the program is on al Qaeda 
terrorist threats, nor the significant benefits already served by the activities at issue. 
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Accordingly, while this information would help demonstrate the importance of the activities and 
compelling interests at stake would itself harm national security, I must assert the state secrets 
privilege and DNI statutory privilege over the successful application of the MSA TSP and meta 
data activities. 

C, (V) Information That Would Confirm or Deny Intelligence Targets 

57* (TS//SI//NF) 1 further assert the state secrets privilege and the DNI statutory 
privilege to protect from disclosure in this case information that would reveal or tend to reveal 
whether or not the four Plaintiffs in this case have had the contents of their telephone and 
Internet communications and information related to those communications intercepted, 
disclosed, divulged, and/or used without judicial or other lawful authorization. See In Camera 
Alexander DecL 1 61, 



See In Camera Alexander DecL H 74-75, As should be 
obvious, to confirm or deny whether someone is a target of surveillance would disclose either 
who is being targeted — thus compromising that collection — or who is not being targeted, thus 
revealing to adversaries that an individual is a secure source for communicating or, more 
broadly, the methods being used to conduct surveillance. See id. f 75. While it may seem 
innocuous to disclose that law-abiding citizens are not being targeted, this may provide insight to 
a trained eye as to the scope of NSA's activities, Moreover, providing assurances that someone 
is not being targeted becomes unworkable, and itself revealing, in cases where an individual may 
be targeted. A refusal to confirm or deny only in cases where surveillance is occurring would 
effectively disclose and compromise that surveillance. 
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The only recourse for NS A is to 


leither confirm nor deny whether someone has been targeted or subject to NS A collection, 
egardless of whether the individual has been targeted or not. To say otherwise when challenged 
n litigation would result in the frequent, routine exposure of NS A information, sources, and 
nethods and would severely undermine surveillance activities in general 


59. (TS// 



(U) RISK OF LITIGATION 


C/NF) Finally, I concur with Gen. Alexander's conclusion 


hat further litigation of this case will inherently risk the disclosure of highly classified activities. 



60. 



C/NF) In addition, as Gen. Alexander explains, Plaintiffs* 


central claims are simply inaccurate: NSA is not sweeping up the content of millions of 
domestic Internet communications. The content of email and telephone communications are 
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collected by NSA pursuant to the TSP only if at least one party to the communication is a 


■ 


member or affiliate of al Qaeda and such communication originated or terminated outside the 
United States; meta data, which is non-content information, is collected in bulk but only queried 



and viewed in limited circumstances in order to track fl^^^^^^^^^H terrorist groups. 
See In Camera Alexander DecL 1 45. Moreover, since July 2004, Internet meta data is being 
collected pursuant to PISC authorization— not, as Plaintiffs allege, without a warrant. Id. 
Nonetheless, any attempt to adjudicate the lawfulness of classified intelligence programs at issue, 
including to demonstrate why Plaintiffs' allegations are inaccurate, would not only require a 
exposition of the facts to demonstrate their lawfulness, but would risk disclosure of those facts in 
the process. 

61 . (TS//SI//OC//Nr) T he stakes we face in the U.S. Intelligence Community are of 
the highest magnitude. We know al Qaeda is planning to attack inside the United States again, 
whether it be a "small" scale attack on shopping malls or 'Tun 11 places that kills dozens, a 
devastating attack on aviation or rail systems that kills hundreds, a catastrophic, mass-casualty 
attack that kills thousands, an attack on government or economic sector infrastructure that would 
cause severe economic harm or threaten the continuity of government, or perhaps in the future, 
the unthinkable prospect of a nuclear or radiological attack of some kind. NS A's activities 

authorized by the President after 9/1 1, and one crucial tool 
authorized by the Foreign Intelligence Surveillance Court, arc all directed at this terrible threat. 
NSA's activities at risk of disclosure in this case an essential tools in detecting and preventing 
the threat of a future terrorist attack on the United States and great care must be taken to protect 
them from disclosure. 

62. ^TSWF^For these reasons, in addition to invoking the state secrets and DNI 

CLASSIFIED DECLARATION OF JOHN D. NEGROPONTE, 
DIRECTOR OF NATIONAL INTELLIGENCE 
CASENO.C-06-0672-VRW 

TOP SFrRBT//CQb ^ 





1 

2 
3 
4 
5 
6 
7 

9 
10 
11 

12 
13 
14 
15 

16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 


Case4:08-cv-04373-JSW Document222 Filed05/05/14 Page31of31 

roved for public release May 5, 2014 


statutory privilege to protect the intelligence information, sources, and methods at issue, I join 
with Gen. Alexander in respectfully urging the Court to dismiss this case. 

I declare under penalty of perjury that the foregoing is true and correct. 

DATE: yf//Z 7t^^^> 

JOHN D. NEGRO^ONTE 
Director of National Intelligence 
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